enable the SA token node thing

openshift · Mar 27, 2024 · f634fe2 · f634fe2
1 parent ef1813b
commit f634fe2
Show file tree

Hide file tree

Showing 6 changed files with 60 additions and 0 deletions.
diff --git a/config/v1/feature_gates.go b/config/v1/feature_gates.go
@@ -171,6 +171,27 @@ func AllFeatureSets() map[ClusterProfileName]map[FeatureSet]*FeatureGateEnabledD
 var (
 	allFeatureGates = map[ClusterProfileName]map[FeatureSet]*FeatureGateEnabledDisabled{}
 
+	FeatureGateServiceAccountTokenNodeBindingValidation = newFeatureGate("ServiceAccountTokenNodeBindingValidation").
+								reportProblemsToJiraComponent("apiserver-auth").
+								contactPerson("stlaz").
+								productScope(kubernetes).
+								enableIn(TechPreviewNoUpgrade).
+								mustRegister()
+
+	FeatureGateServiceAccountTokenNodeBinding = newFeatureGate("ServiceAccountTokenNodeBinding").
+							reportProblemsToJiraComponent("apiserver-auth").
+							contactPerson("stlaz").
+							productScope(kubernetes).
+							enableIn(TechPreviewNoUpgrade).
+							mustRegister()
+
+	FeatureGateServiceAccountTokenPodNodeInfo = newFeatureGate("ServiceAccountTokenPodNodeInfo").
+							reportProblemsToJiraComponent("apiserver-auth").
+							contactPerson("stlaz").
+							productScope(kubernetes).
+							enableIn(TechPreviewNoUpgrade).
+							mustRegister()
+
 	FeatureGateValidatingAdmissionPolicy = newFeatureGate("ValidatingAdmissionPolicy").
 						reportProblemsToJiraComponent("kube-apiserver").
 						contactPerson("benluddy").

diff --git a/features.md b/features.md
@@ -30,6 +30,9 @@
 | PinnedImages| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
 | PlatformOperators| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
 | RouteExternalCertificate| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
+| ServiceAccountTokenNodeBinding| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
+| ServiceAccountTokenNodeBindingValidation| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
+| ServiceAccountTokenPodNodeInfo| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
 | SignatureStores| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
 | SigstoreImageVerification| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
 | TranslateStreamCloseWebsocketRequests| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |

diff --git a/payload-manifests/featuregates/featureGate-Hypershift-Default.yaml b/payload-manifests/featuregates/featureGate-Hypershift-Default.yaml
@@ -115,6 +115,15 @@
                     {
                         "name": "RouteExternalCertificate"
                     },
+                    {
+                        "name": "ServiceAccountTokenNodeBinding"
+                    },
+                    {
+                        "name": "ServiceAccountTokenNodeBindingValidation"
+                    },
+                    {
+                        "name": "ServiceAccountTokenPodNodeInfo"
+                    },
                     {
                         "name": "SignatureStores"
                     },

diff --git a/payload-manifests/featuregates/featureGate-Hypershift-TechPreviewNoUpgrade.yaml b/payload-manifests/featuregates/featureGate-Hypershift-TechPreviewNoUpgrade.yaml
@@ -161,6 +161,15 @@
                     {
                         "name": "RouteExternalCertificate"
                     },
+                    {
+                        "name": "ServiceAccountTokenNodeBinding"
+                    },
+                    {
+                        "name": "ServiceAccountTokenNodeBindingValidation"
+                    },
+                    {
+                        "name": "ServiceAccountTokenPodNodeInfo"
+                    },
                     {
                         "name": "SignatureStores"
                     },

diff --git a/payload-manifests/featuregates/featureGate-SelfManagedHA-Default.yaml b/payload-manifests/featuregates/featureGate-SelfManagedHA-Default.yaml
@@ -118,6 +118,15 @@
                     {
                         "name": "RouteExternalCertificate"
                     },
+                    {
+                        "name": "ServiceAccountTokenNodeBinding"
+                    },
+                    {
+                        "name": "ServiceAccountTokenNodeBindingValidation"
+                    },
+                    {
+                        "name": "ServiceAccountTokenPodNodeInfo"
+                    },
                     {
                         "name": "SignatureStores"
                     },

diff --git a/payload-manifests/featuregates/featureGate-SelfManagedHA-TechPreviewNoUpgrade.yaml b/payload-manifests/featuregates/featureGate-SelfManagedHA-TechPreviewNoUpgrade.yaml
@@ -161,6 +161,15 @@
                     {
                         "name": "RouteExternalCertificate"
                     },
+                    {
+                        "name": "ServiceAccountTokenNodeBinding"
+                    },
+                    {
+                        "name": "ServiceAccountTokenNodeBindingValidation"
+                    },
+                    {
+                        "name": "ServiceAccountTokenPodNodeInfo"
+                    },
                     {
                         "name": "SignatureStores"
                     },